CMTMA2162318-Redacted_JA_.pdf

J&A - CMTMA2162318 DNS BIND Forum Maintenance

Page 1 of 7 Pages

JUSTIFICATION FOR OTHER THAN FULL AND

OPEN COMPETITION (OTFAOC)

Federal Acquisition Regulation (FAR) Part 6 Justification & Approval (J&A), Supporting

Procurements under FAR Part 12, FAR Subpart 13.5, and FAR Part 15

Purchase Request Number: CMTMA2162318

Contract Number: To Be Determined (TBD)

Task/Delivery Order Number: TBD

Procurement Title: Berkeley Internet Name Domain (BIND) Software Maintenance

Estimated Value: $___________

Statutory Authority: Section 4202 of the Clinger-Cohen Act of 1996

JUSTIFICATION FOR OTHER THAN FULL AND OPEN COMPETITION (OTFAOC)

Justification for OTFAOC Number:

Upon the basis of the following justification, I, as contracting officer, hereby approve the use of other than full and open competition of the proposed contractual action pursuant to the authority of Section 4202 of the Clinger-Cohen Act of 1996, as implemented by FAR 6.302-1, only one responsible source and no other supplies or services will satisfy agency requirements.

1. REQUIRING AGENCY AND CONTRACTING OFFICE:

a. Requiring Agency:

Defense Information Systems Agency (DISA)

Program Executive Office (PEO) – Mission Assurance (MA) & Network Assurance/

Computer Network Defense Solutions Division

6910 Cooper Avenue

Fort Meade, Maryland 20755-7088

b. Contracting Office:

DISA/Defense Information Technology Contracting Organization (DITCO)

Scott/PL8321

2300 East Drive, Building 3600

Scott Air Force Base, Illinois 62225-5406

2. NATURE/DESCRIPTION OF ACTION(S):

a. The nature of this requirement is to procure a firm fixed price (FFP) contract for

Commercial oOff-the-shelf (COTS) renewal of the Domain Name System (DNS)

BIND Forum membership. This procurement will perpetuate the existing coverage under current contract HC1028-13-P-0213, which expires September 10, 2016. The recommendation is to solicit a quotation utilizing open market procedures, Test Program for Certain Commercial Items, to the Original

Equipment Manufacturer (OEM) Internet Systems Corporation (DNSco), a subsidiary of Internet Systems Consortium, Inc. (ISC) using Federal Business

Opportunities (FBO).

Page 2 of 7 Pages

b. The period of performance (PoP) consists of a 1-year base period, September 11, 2016 – September 10, 2017, with two, 1-year option periods, September 11, 2017–September 10, 2018, and September 11, 2018 –September 10, 2019. FY16

Defense Working Capital Funds (DWCF) will be used to fund the purchase. The applicable North American Industry Classification System (NAICS) code is

541519 (size standard $27.5 million). The total estimated lifecycle cost of this acquisition is $_________.

3. DESCRIPTION OF SUPPLIES/SERVICES:

a. This requirement is for the BIND Forum membership renewal that will benefit

DISA PEO-MA’s DNS Integrated Product Team. The BIND Forum was created by ISC to support current and future development of BIND as a complete Open

Source reference implementation of the DNS protocol for the good of the internet community. Members of BIND Forum are ensuring the continued development and maintenance of BIND. It is imperative that DISA maintains access to security vulnerability notices and patches released ahead of the public domain.

Benefits to BIND members include:

Early Security vulnerability notice & patch release to enable announcements & releases ahead of the public

24x7 support

Unlimited number of servers, geographical sites, end users, zones 3rd line support intended to assist your team with integration issues and complicated users issues

Access to the Convenience Value Service tree for the software to allow determination of the ways pre-released changes might affect releases

Priority bug fixes and viewable queue to monitor progress

Direct access to the developers on a priority basis to discuss strategy and assist in deployment planning

Direct input to further release planning

b. The PoP and estimated cost of this acquisition is outlined in the table below:

Base Year: September 11, 2016 –September 10, Option Year 1: September 11, 2017 – September 10, 2018

Option Year 2: September 11, 2018 – September 10, 2019

TOTAL $____________

Page 3 of 7 Pages

4. IDENTIFICATION OF STATUTORY AUTHORITY:

(a) This acquisition is conducted under the statutory authority of Section 4202 of the

Clinger-Cohen Act of 1996, as implemented by FAR 6.302-1, only one responsible source and no other supplies or services will satisfy agency requirements. ISC owns the copyrighted source software with all legal rights, privileges, and ownership contained therein. No other source may legally modify or change the software, nor would they have access to the source code to do so. Only the OEM ISC will satisfy the requirement.

5. DEMONSTRATION OF CONTRACTOR’S UNIQUE QUALIFICATIONS:

(a) Description of events.

(1) DISA has been benefiting from membership since 2009. BIND Forum offers early notification of vulnerabilities and patches that are critical to ensure BIND, as a core component of the DISA and Department of Defense (DoD) DNS infrastructure, operates securely and reliably. Without a strong and reliable DNS implementation of

BIND, DISA’s networks and information systems are at risk. DISA has invested over

$____________to date in BIND maintenance, DNS development, and engineering.

(b) Justification.

(1) Minimum Government requirements. DNS BIND Forum membership renewal.

(2) Proposed sole source contractor. ISC software is proprietary. Only DNSco, ISC’s subsidiary, will be able to satisfy the program’s requirement for DNS BIND software maintenance. BIND is an implementation of the DNS protocols. Currently there are no third parties who are authorized to resell the membership.

(3) Discussion regarding cause of the sole source situation. Only ISC will be able to satisfy the program’s requirement for DNS BIND Forum membership. ISC owns the copyrighted source memberships with all legal rights, privileges, and ownership contained therein. BIND Forum offers early notification of vulnerabilities and patches that are critical to ensure BIND, as a core component of the DISA and DoD

DNS infrastructure, operates securely and reliably. Without a strong and reliable DNS implementation of BIND, DISA’s networks and information systems are at risk. DISA has invested over $____________to date in BIND, DNS development, and engineering.

(4) Demonstration of unique source. As referenced above, the DNS BIND Forum membership is proprietary software, manufactured by ISC. Only ISC will be able to satisfy the program’s requirement for the software support. ISC does not have authorized resellers.

(5) Procurement discussion. The benefits of this BIND Forum have been demonstrated since DISA began membership in 2009. Obtaining early notification of vulnerabilities and patches is critical to ensure BIND, as a core component of the DISA and DoD

DNS infrastructure, operates securely and reliably. Without a robust and reliable DNS implementation of BIND, DISA’s reputation and networks and information systems are at risk. DISA has invested $____________to date in BIND maintenance, DNS development, and engineering.

Page 4 of 7 Pages

6. FEDBIZOPPS ANNOUNCEMENT/POTENTIAL SOURCES:

(a) A synopsis for this requirement will be published on the FEDBIZOPPS Website, as required by FAR Subpart 5.2.

7. DETERMINATION OF FAIR AND REASONABLE COST: The contracting officer will make a determination that the anticipated cost to the government is fair and reasonable, based on comparison of commercial list pricing, previous history, and comparison of the independent government cost estimate. A determination will be made that the contract represents the best value to the government and results in the lowest overall price alternative. DITCO has concluded that placing an order with ISC represents the best value (as defined in FAR 2.101) and results in the lowest overall cost alternative (considering price, special features, administrative costs, etc.)

to meet the government's needs. Certified cost and price data is not required for this commercial item acquisition in accordance with FAR 15.403-1(b) (3).

8. MARKET RESEARCH:

a. DISA completed market research for this procurement in July 2015. The team surveyed the market through internet research, contacting the manufacturer, and internal discussions.

b. The first step taken in conducting market research in support of this project was to determine if there were other software solutions that would meet the government’s minimum requirements. Initial product research was conducted with websites, vendor brochures, and hands-on knowledge of available software. Through market research, it was determined that there is no viable product in the market place that can meet the government’s requirements. No competitor or alternative products can provide a family of ‘like’ products to support all DISA mission partners based throughout the enterprise.

Additionally, market research verified there are no possible resellers available for the required BIND Forum membership at this time.

c. Market research determined the required; BIND Forum membership is not available on any current Department of Defense Enterprise Software Initiative Blanket Purchase

Agreement, National Aeronautics and Space Administration Solutions for Enterprise-

Wide Procurement, or General Services Administration Schedule contract. It is recommended that this requirement be awarded via open market to ISC, a small business, the only known source of the required BIND Forum membership.

9. ANY OTHER SUPPORTING FACTS: None

10. LISTING OF INTERESTED SOURCES:

In accordance with DFARS PGI 206-302-1, a sources sought notice was posted to FBO on April 12, 2016 through May 3, 2016. One source, the sole source, was identified as capable of providing the benefits identified:

DNSco; a subsidiary of Internet Systems Consortium, Inc.

950 Charter Street Redwood City, California 94063

Jason Lasky

Page 5 of 7 Pages

11. ACTIONS THE AGENCY MAY TAKE TO REMOVE OR OVERCOME BARRIERS

THAT LED TO THE EXCEPTION TO FULL AND OPEN COMPETITION:

(a) Procurement History.

Contract: HC1028-13-P-0213

Contractor: Internet Systems Consortium, Inc.

PoP: September 11, 2015 – September 10, 2016

Contract Value: $____________

Contract Type: FFP

Objective: BIND Forum Maintenance

Contract: HC1028-12-P-0170

Contractor: Internet Systems Consortium, Inc.

PoP: September 11, 2012 – September 10, 2013

Contract Value: $____________

Contract: HC1028-11-P-0394

Contractor: Internet Systems Consortium

PoP: September 11, 2011 – September 10, 2012

Contract Value: $____________

HC1028-10-P-2247

PoP: September 11, 2010 – September 10, 2011

Contract Value: $____________

Contract: HC1028-09-P-2282

PoP: September 11, 2009 – September 10, 2010

Contract Value: $____________

Contract: HC1028-08-P-2277

PoP: September 11, 2008 – September 10, 2009

Contract Value: $____________

Page 6 of 7 Pages

(b) Soliciting a quote for the purchase of BIND on FBO is both encouraged and supported.

DISA will continue to evaluate the security hardware/software marketplace. As maintenance providers emerge and/or mission requirements change, DISA will reevaluate its choice of maintenance providers.

12. REFERENCE TO THE APPROVED ACQUISITION PLAN (AP):

ALL QUESTIONS REGARDING THIS JUSTIFICATION ARE TO BE REFERRED TO

Nicholas Schulte at nicholas.l.schulte.civ@mail.mil or 618-229-9332 mailto:nicholas.l.schulte.civ@mail.mil